NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Cybersecurity
SMB Enumeration
Master the Server Message Block protocol. Learn to extract users, shares, and passwords, and exploit misconfigurations to gain initial access or lateral movement.
Room tasks
1Understanding SMB
2enum4linux Walkthrough
3smbclient & smbmap: Browsing, Accessing, and Exfiltrating Shares
4Common SMB Misconfigurations
5Guided Lab: Extracting Credentials from an Open Share
Frequently Asked Questions
What is SMB enumeration?
SMB enumeration queries the Server Message Block service to list shares, users, groups, and policies. It often reveals files and weak settings that give initial access.
What is a null session in SMB?
A null session is an anonymous connection with no username or password. If a server allows it, attackers may list users and shares, which is a common misconfiguration on older systems.
Which tools enumerate SMB?
Popular options are enum4linux, smbclient, smbmap, and NetExec. This free Codelivly room walks through each tool and what its output means in a hands-on setting.